1-12
dot1x port-method
Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view, Ethernet port view
Parameters
macbased: Performs MAC-based authentication.
portbased: Performs port-based authentication.
interface-list: Ethernet port list, in the form of interface-list= { interface-type interface-number [ to
interface-type interface-number ] } &<1-10>, in which interface-type specifies the type of an Ethernet
port and interface-number is the number of the port. The string “&<1-10>” means that up to 10 port lists
can be provided.
Description
Use the dot1x port-method command to specify the access control method for specified Ethernet
ports.
Use the undo dot1x port-method command to revert to the default access control method.
By default, the access control method is macbased.
This command specifies the way in which the users are authenticated.
z In MAC-based authentication mode, the users connected to the port are authenticated separately.
Thus, log-off of a user will not affect other users.
z In port-based authentication mode, all the users connected to the port can access the network
without being authenticated if a user among them passes the authentication. When the user logs
off, the network is inaccessible to all other supplicant systems too.
z Changing the access control method on a port by the dot1x port-method command will forcibly log
out the online 802.1x users on the port.
In system view:
z If you do not provide the interface-list argument, these two commands apply to all the ports of the
switch.
z If you specify the interface-list argument, these commands apply to the specified ports.
In Ethernet port view, the interface-list argument is not available and the commands apply to only the
current Ethernet port.
Related commands: display dot1x.
Examples
# Specify to authenticate users connected to Ethernet 1/0/1 by port numbers.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x port-method portbased interface Ethernet 1/0/1